9fa1a05fa5e71989907334ef9b89f6fda5104be59d556af8384d6a4ee20d8f0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fa1a05fa5e71989907334ef9b89f6fda5104be59d556af8384d6a4ee20d8f0e
Size

5.6MB
MD5

d65328745fb1f1b6d176b7d70b82d8d8
SHA1

1b41be75fa98bd66e3d10ec82e06001a8a9b2cad
SHA256

9fa1a05fa5e71989907334ef9b89f6fda5104be59d556af8384d6a4ee20d8f0e
SHA512

c094800b2f1d979e428fb1fc57e1a4fcf6eb2db33932667bbbf3f6ced5e1fc698c136d2edbf91c54d6fbf27672ea93a757d247e0ed0819a088c214106d2ff308
SSDEEP

98304:ZzLFlkuWI8sqgrFfnmGDw/ZpENIKLN5ahiDdRFN1+zLxrxJb/RA:ZFlkuYyVmGDoZyNICrahihRCb6

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9fa1a05fa5e71989907334ef9b89f6fda5104be59d556af8384d6a4ee20d8f0e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 401KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.2MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdss
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE